Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: lnOJ0oCWPlarWzj4BVByCDWBSlr/ktfINlgTZMVt1WA=
Subject key identifier: 0C:4E:82:9B:E8:25:3A:1A:77:2C:F5:EB:C6:86:B2:87:C4:BB:A6:05
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019A0035D39F4C3CF96E05E8341FE6C32008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0CFF
Signing time: Mon 20 Oct 2025 06:01:58 +0000
Manifest this update: Mon 20 Oct 2025 06:01:58 +0000
Manifest next update: Tue 21 Oct 2025 06:01:58 +0000
Files and hashes: 1: lX5lUBRMr0qRNeUQdaN4ltutYPA.roa (hash: BmUNSmbdUF6R1nm83/KFGUM2Dtk8AbO+iQW7VW/AX64=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: EiPFIBz5ZgPCUZNEAfQVYSA6qBMLKsKkIG0lvOJk2tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:d3:9f:4c:3c:f9:6e:05:e8:34:1f:e6:c3:20:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Oct 20 06:01:58 2025 GMT
Not After : Oct 21 06:01:58 2025 GMT
Subject: CN=0c4e829be8253a1a772cf5ebc686b287c4bba605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:27:a3:f9:89:92:c8:72:d0:88:f1:08:33:22:
84:26:c1:67:6b:fc:9e:1a:41:e3:05:aa:5a:52:7d:
c1:94:29:64:58:74:26:8c:fc:92:69:49:62:29:c8:
5f:a5:f8:9d:20:43:21:d6:68:47:22:e5:17:c4:af:
38:5a:c9:fa:ba:81:a9:0c:45:ff:45:9c:88:19:3a:
e1:5b:4e:21:81:7c:17:08:f6:f9:eb:4f:90:5c:aa:
36:2f:ba:71:79:0a:e3:c4:cf:05:fb:71:0f:93:b6:
b1:e1:4e:46:3d:2b:9d:80:db:26:19:a6:fb:d4:d5:
13:88:82:74:31:9c:3d:2e:34:a3:09:9f:ee:f4:b9:
36:fa:eb:16:53:13:50:79:58:e5:82:d3:0d:40:b2:
83:33:32:90:a3:f7:2e:84:8c:9d:d3:63:e3:ca:75:
ba:d2:0c:44:5d:0a:f9:00:b0:13:28:25:a3:20:da:
4f:e2:12:5e:c9:9b:e0:5f:a4:94:81:39:1c:da:e5:
26:7a:8f:df:87:55:6b:a4:c2:16:bd:90:21:45:9b:
4d:0f:ec:30:8b:a6:a4:17:ce:4f:d6:70:30:fd:4e:
2f:b6:20:4e:d0:95:ce:7c:dd:e1:51:ca:e0:1b:49:
4c:2b:5b:98:c7:d2:dd:67:3a:34:46:32:7d:e0:d3:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4E:82:9B:E8:25:3A:1A:77:2C:F5:EB:C6:86:B2:87:C4:BB:A6:05
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:5a:7a:31:e2:52:83:c1:40:29:cf:59:c1:03:4e:2b:bd:
40:88:c4:cc:b0:84:1c:bc:8a:1f:56:a6:eb:0e:aa:c2:c2:ba:
b4:12:28:78:ed:98:0d:ad:84:40:77:1b:5b:7f:f2:29:b6:f5:
ba:b9:5c:9f:92:5e:b8:ae:dd:d1:bf:6f:d0:a4:0e:d3:de:7a:
47:59:85:05:53:19:58:af:57:27:6b:46:71:91:7d:91:38:2d:
83:f0:3e:71:74:e4:13:8a:90:f7:17:6d:3a:6d:09:8e:cc:a5:
6d:63:4b:d7:86:fa:a9:88:f4:34:b4:52:43:93:1f:6a:ce:74:
55:31:cd:b9:f6:6f:96:e5:eb:a3:e6:81:64:c0:33:a0:b0:8d:
84:6b:93:0d:a1:fa:7f:48:aa:3a:87:05:85:03:56:13:36:ef:
52:b9:4c:1d:c2:ba:d5:71:e9:18:7e:69:ee:9a:4a:48:4d:52:
e2:bd:ee:57:de:ec:bc:64:f1:c7:22:3a:83:fe:4b:5a:00:11:
22:94:69:a9:4f:01:1c:3a:65:01:4c:18:01:31:26:fc:d5:d7:
f9:b2:4e:e4:e6:16:6a:38:2f:53:8f:12:91:51:bb:3f:8a:94:
95:1b:76:0d:f9:18:cf:74:75:e7:7f:7a:fe:83:c5:ee:29:85:
32:93:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:31 2025 by rpki-client